Microsoft Windows Server Buffer Overflow Vulnerability

KRITISCH 9.8EXPLOITED (CISA KEV)CVE-2017-7269 · Published 27/03/2017 · updated 17/06/2026

Microsoft Windows Server Buffer Overflow Vulnerability. Actively exploited: CISA added this vulnerability to its Known Exploited Vulnerabilities catalog on 03/11/2021. Patch affected systems as an emergency.

Package	Affected versions	Patched versions
internet information services microsoft	`= 6.0`	No fix yet

Description

Buffer overflow in the ScStoragePathFromUrl function in the WebDAV service in Internet Information Services (IIS) 6.0 in Microsoft Windows Server 2003 R2 allows remote attackers to execute arbitrary code via a long header beginning with "If: <http://" in a PROPFIND request, as exploited in the wild in July or August 2016.

References

securityfocus.com/bid/97127 · Broken Link
securitytracker.com/id/1038168 · Broken Link
0patch.blogspot.com/2017/03/0patching-immortal-cve-2017-7269.html · Exploit
danigargu/explodingcan · Exploit
edwardz246003/IIS_exploit · Broken Link
rapid7/metasploit-framework#8162 · Issue Tracking
medium.com/%40iraklis/number-of-internet-facing-vulnerable-iis-6-0-to-cve-2017-7269-8bd153ef5812 · Exploit
support.microsoft.com/en-us/help/3197835/description-of-the-security-update-for-windows-xp-and-windows-server · Broken Link
exploit-db.com/exploits/41738 · Exploit
exploit-db.com/exploits/41992 · Exploit
cisa.gov/known-exploited-vulnerabilities-catalog · US Government Resource
CISA KEV · CVE-2017-7269

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free